Before you create distributed firewall rules for a data center group, you can group data center group networks into static security groups to which the rules apply.
Static security groups are groups of data center group networks to which distributed firewall rules apply. Grouping networks helps you to reduce the total number of distributed firewall rules to be created.
Prerequisites
Verify that you have at least one data center group network that is backed by NSX.
Procedure
- From the primary left navigation panel, select Networking, and from the page top navigation bar, select the Data Center Groups tab.
The list of data center groups appears.
- Click the target data center group.
- Under Security, click Static Groups and click New.
- Enter a name and, optionally, a description for the static group, and click Save.
The new static security group appears in the list.
- Select the newly created static security group and click Manage Members.
- Select the data center group networks that you want to add to the static security group.
- Click Save.
